[ubuntu/trusty-proposed] freetype 2.5.2-1ubuntu2 (Accepted)

[Marc Deslauriers]

freetype (2.5.2-1ubuntu2) trusty; urgency=medium

  * SECURITY UPDATE: denial of service and possible code execution in
    CFF rasterizer
    - debian/patches/CVE-2014-2240.patch: validate hintMask in
      src/cff/cf2hints.c.
    - CVE-2014-2240
  * SECURITY UPDATE: denial of service in CFF rasterizer
    - debian/patches/CVE-2014-2241.patch: don't trigger asserts in
      src/cff/cf2ft.c.
    - CVE-2014-2241

Date: Thu, 13 Mar 2014 12:47:17 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/trusty/+source/freetype/2.5.2-1ubuntu2
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 13 Mar 2014 12:47:17 -0400
Source: freetype
Binary: libfreetype6 libfreetype6-dev freetype2-demos libfreetype6-udeb
Architecture: source
Version: 2.5.2-1ubuntu2
Distribution: trusty
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description: 
 freetype2-demos - FreeType 2 demonstration programs
 libfreetype6 - FreeType 2 font engine, shared library files
 libfreetype6-dev - FreeType 2 font engine, development files
 libfreetype6-udeb - FreeType 2 font engine for the debian-installer (udeb)
Changes: 
 freetype (2.5.2-1ubuntu2) trusty; urgency=medium
 .
   * SECURITY UPDATE: denial of service and possible code execution in
     CFF rasterizer
     - debian/patches/CVE-2014-2240.patch: validate hintMask in
       src/cff/cf2hints.c.
     - CVE-2014-2240
   * SECURITY UPDATE: denial of service in CFF rasterizer
     - debian/patches/CVE-2014-2241.patch: don't trigger asserts in
       src/cff/cf2ft.c.
     - CVE-2014-2241
Checksums-Sha1: 
 785c4444e74c292339cdfbf538f7a110db998832 2165 freetype_2.5.2-1ubuntu2.dsc
 e76ae32400a93b178a2d4126dffdec8fc9deea59 39977 freetype_2.5.2-1ubuntu2.diff.gz
Checksums-Sha256: 
 9e4bc27581c22989256017a9551159592904ff1cc3466cbc9b97319eeb1fc66d 2165 freetype_2.5.2-1ubuntu2.dsc
 81af9bfc70d4f5d19c47cd6b517d12e1cecabbc66318cae50efbf42c8fcd07ad 39977 freetype_2.5.2-1ubuntu2.diff.gz
Files: 
 4c4e19b5714804afd3a53fb0669927e4 2165 libs optional freetype_2.5.2-1ubuntu2.dsc
 eda9c925032709bbd7463edcded05881 39977 libs optional freetype_2.5.2-1ubuntu2.diff.gz
Original-Maintainer: Steve Langasek <vorlon at debian.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQIcBAEBCgAGBQJTIeaDAAoJEGVp2FWnRL6TBw8P/j8ys6z8g7JhsezyIgxg9Thb
t8HCF2FO+VT4qkZIWqHw+M5u9EbCdZT5joW2HuVyO8ApEqzmsjgkxl+G2mObsZ4Q
3QQskRg/huFYQgtycUPUIVMsPDNLI0l2Kh+OEADZqz5OGELIa5w7GAIQLPx/27hi
6ldxmT2rwmQqrrrw0agAItma5eXnvZVQynzkS3tbLq0YIa6P7lRJ5CpsWS3K6fGL
eaZ+iXYCKvab3IGS+RAEOoUmUpXZEaAQ99O1/cZ4Gsc2UpHeCSp+iVIWvhWmhNus
jozb+vZfcpxo1E8UjczWZbwB48ZZupCR9m4u4DDse7SIvwk217aQR554gcOgtTVP
jhgtRIJUdkCbkroGCHhYWLZ2SD23jyC2Q6OcbPAK6e6qjCqpksQCyo12r3ZYkSOt
t7YnRP2LWN1dLOZlC+BBHw2J92el8oyhJyKnu0+FxZ8I7hVNwocQhTUS2S6EYAlx
9YWNi/ZdmdepqLpTUhFPBcObta/dmultkyV486kBAztO2hsEBfe3zj6qKuYeflTO
ZtpC2jH/fqaeh2wIIdgiLT/+M5BiXNDXUPTXwnOWiGVqyBi87rUHV3bz6y1q1jZG
k65grv1yYnqCLvfx6AtSv9CymxsmV3aD7g0WRMm0RsDDpLgQ0Z+Qmkrdg4xiF5uD
meACHLYgcDvuofZmCONd
=J1JO
-----END PGP SIGNATURE-----